Hello, How can you use the same parts of simple/advanced XML in several views, without having to duplicate the code? Is it possible to create a parent view for all your views (or anything similar with/ without inheritance)? I don't think (maybe I am wrong) it is possible to do so with a module, as the parts of xml I am talking about contains many things, like 30 modules and custom javascript. Basically I need to have this big portion of xml inside all my views, and I do not want to duplicate it every time for obvious reason (code maintainability, efficiency etc...). Thanks!! ... View more

Hi, I have quite a big number of searches and views within an app, and manage them within the "searches & Reports" panel of the manager is not very convenient. I would really like to create sub-folders within the manager view to sort searches and views. Is there any way to actually do it? Note that I don't ask how to sort things in the drop down menu within the search app, but really in the "manager/Searches and reports" view (and in the "user interface/views" too). Thanks! EDIT My question was maybe not clear enough. My need is to organize searches and view internally. Nothing should show up in the application as it is an end-user app, and it should only contains dashboards and stuff, no searches cause end-user don't even know the splunk syntax. I would love to have a finer granularity on how searches are organized in the manager. Which means not only by application, but also by type, subtype etc. This is just for me, because actually what I am doing is having a naming convention that puts all searches related close one to each other, like this: prod_summary_relative time prod_summary_log by mn prod_summary_ip by hour prod_segment_country prod_segment_browserName draft_segment_session time etc... This is very inconvenient because I can't see all the searches related (like all summary search) at once in the manager (have around 50, and should end up with more that 200) I have two idea that may work: 1°) try to customize the default manager view of splunk, but it is really complicated as the view is generated from js code and is not a static html page. 2°) create a custom app called search manager where I will make dashboards and stuff with what I want, but it may take a some time. I can't believe that nobody never had this problem in a big application, so I will continue to investigate, but any clue would be greatly appreciated. Guilhem ... View more

Hi So I have splunk 4.2 installed on a remote server, I have downloaded the javascript SDK on my local machine, along with node v0.8.9. I copied the xml2json from my local machine to var/apps on the server. When I try to run the examples using node sdkdo examples, the example show in my local web browser. I have set up a proxy in my local apache web server (I use MAMP) like this: httpd.conf SSLProxyEngine On ProxyPass /proxy/ https://My remote server I have enabled some stuff in this file: Header set Access-Control-Allow-Origin: * Header set Access-Control-Allow-Methods: GET,POST,PUT,DELETE Header set Access-Control-Allow-Headers: X-ProxyDestination,Authorization To allow AJAX cross domain request. When I hit the Run button of the example, I get this: POST http://localhost:6969/proxy/services/auth/login?output_mode=json 500 (Internal Server Error) When I try to edit the index.html example and replace the line var http = new splunkjs.ProxyHttp("/proxy"); with var http = new splunkjs.ProxyHttp("http://localhost/proxy"); I get this error (MAMP active): OPTIONS http://localhost/proxy/services/auth/login?output_mode=json 200 (OK) jquery.min.js:4 POST http://localhost/proxy/services/auth/login?output_mode=json 404 (Not Found) (MAMP inactive) OPTIONS http://localhost/proxy/services/auth/login?output_mode=json Resource failed to load I don't know what's going on. I am not a server guy, nor a js developper, but I try to do my best to make it works. Thanks! ... View more